Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/_jXKX3SCGFJl7-ARrnNQT2L5zNo.roa
File: _jXKX3SCGFJl7-ARrnNQT2L5zNo.roa (raw, json)
Hash identifier: fQhs+LVNkZJzReGps7d+ksIoKwsg2Og3soRZJplmh3Q=
Subject key identifier: FE:35:CA:5F:74:82:18:52:65:EF:E0:11:AE:73:50:4F:62:F9:CC:DA
Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Certificate serial: 01856F799159E616634B858E99758260620B
Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/_jXKX3SCGFJl7-ARrnNQT2L5zNo.roa
Signing time: Sun 01 Jan 2023 22:35:16 +0000
ROA not before: Sun 01 Jan 2023 22:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44942
IP address blocks: 92.63.224.0/20 maxlen: 20
185.114.116.0/22 maxlen: 22
185.157.216.0/22 maxlen: 22
92.246.104.0/22 maxlen: 22
92.246.108.0/22 maxlen: 22
92.246.111.0/24 maxlen: 24
92.246.108.0/24 maxlen: 24
92.246.110.0/24 maxlen: 24
92.246.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:91:59:e6:16:63:4b:85:8e:99:75:82:60:62:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793
Validity
Not Before: Jan 1 22:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe35ca5f7482185265efe011ae73504f62f9ccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0a:95:97:04:69:4a:3c:93:72:e2:8c:da:26:
80:dd:f9:01:36:64:0a:37:90:d2:95:6a:8b:69:99:
91:70:38:80:06:55:b6:89:40:8b:62:68:fa:b5:10:
7a:c5:cc:54:f8:53:70:ec:32:c2:87:b6:3c:8c:59:
31:da:62:dd:31:2c:7d:5d:54:dc:9a:43:36:14:f6:
a9:14:0a:36:d3:e5:e8:04:4a:55:6e:59:c4:7f:01:
08:ba:13:c7:e4:d1:b3:ce:32:82:b2:d9:19:91:78:
85:f5:73:d4:c7:b8:69:49:84:78:cb:61:c0:41:73:
12:40:c8:2a:58:a7:81:03:fe:6d:b1:18:eb:cc:e2:
0f:dd:ac:20:8f:6c:e0:4a:1a:8d:bc:b9:d6:81:9c:
7e:28:e2:a2:2c:90:72:c1:54:7c:07:8c:68:bc:d4:
61:ba:1e:01:d5:ae:c8:91:4a:36:4c:aa:ea:13:3a:
d6:16:20:16:ba:de:84:b7:f4:63:21:47:a8:27:03:
57:45:47:33:a9:55:12:91:cf:57:61:20:02:a7:15:
33:a9:17:02:1b:c4:fa:50:bf:56:a9:68:d9:02:7d:
a2:0f:f3:8d:7f:ae:07:3f:5a:76:db:91:30:85:e5:
9b:ba:fe:12:63:52:92:07:7e:b9:bd:48:2f:9d:86:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:CA:5F:74:82:18:52:65:EF:E0:11:AE:73:50:4F:62:F9:CC:DA
X509v3 Authority Key Identifier:
keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/_jXKX3SCGFJl7-ARrnNQT2L5zNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.224.0/20
92.246.104.0/21
185.114.116.0/22
185.157.216.0/22
Signature Algorithm: sha256WithRSAEncryption
28:56:aa:e7:4a:51:9c:12:6a:1c:0f:ea:bd:4f:f6:d2:b9:a5:
6e:69:8e:ce:44:6c:d4:9c:12:01:60:5a:b7:f0:42:f7:47:04:
37:62:10:25:4e:c0:29:d0:ba:85:10:02:d6:54:90:d5:e9:95:
34:39:05:71:84:26:bf:71:85:2f:cd:8b:0a:e6:8f:3a:c3:b0:
4c:41:0f:80:49:bf:76:5c:62:b3:a0:92:87:74:d8:6f:7d:95:
ab:02:94:91:73:58:16:5b:31:a4:87:a8:79:74:95:6e:9f:b2:
70:aa:13:27:c3:23:68:09:69:51:4b:ea:77:45:06:e3:e8:fa:
7d:2b:96:2c:3b:16:c4:6b:5d:37:fb:f0:f9:15:d6:e5:89:29:
d6:19:da:6e:f6:02:8f:31:6b:53:a0:e2:0b:9b:2f:db:93:b8:
3e:af:ae:ad:e4:87:6c:2f:2a:b7:11:53:e1:9b:2d:63:1c:3f:
db:a0:a3:b0:6d:40:a6:b9:78:be:4b:f1:1c:ae:7b:a2:4d:2c:
56:ba:4b:e8:47:ec:6b:d1:31:51:f3:88:cc:c0:e0:8e:e1:da:
d0:7c:8b:ba:01:89:a0:4f:4e:f2:44:1b:e7:c9:21:31:07:c1:
c6:44:48:95:64:42:9c:34:6e:8d:ad:39:e6:d9:9b:7f:cc:6a:
46:29:13:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:15 2023 by rpki-client on console-fra.rpki-client.org